Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a261c9fadbee8b5081f7676fb252ae5b28b758cafec5b9d6b85622539b11c82f.elf

  • Size

    161KB

  • Sample

    250219-fq8exaxqf1

  • MD5

    257418576e8a4e2cd65c16c0b636c2af

  • SHA1

    bb88696ad5eefa960e4710ee42af7292670480d1

  • SHA256

    a261c9fadbee8b5081f7676fb252ae5b28b758cafec5b9d6b85622539b11c82f

  • SHA512

    8f914595ee4232feea774c76d2ab5c94399cefe877bfb728e14dfe82b4951bfdf28162c050672ee0cfdb20b744e2cd6533b8a22d11eb6f44e5e9c3ce6ee51543

  • SSDEEP

    3072:8R2AYPY3B3En760r3m/vW2K2Gpvzzv/sdbSDPYSIdkiQWBkG1mZCwQufizQd17:8LyPckiQWBmZCwQufizQd17

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

84.200.154.119:4567

Targets

    • Target

      a261c9fadbee8b5081f7676fb252ae5b28b758cafec5b9d6b85622539b11c82f.elf

    • Size

      161KB

    • MD5

      257418576e8a4e2cd65c16c0b636c2af

    • SHA1

      bb88696ad5eefa960e4710ee42af7292670480d1

    • SHA256

      a261c9fadbee8b5081f7676fb252ae5b28b758cafec5b9d6b85622539b11c82f

    • SHA512

      8f914595ee4232feea774c76d2ab5c94399cefe877bfb728e14dfe82b4951bfdf28162c050672ee0cfdb20b744e2cd6533b8a22d11eb6f44e5e9c3ce6ee51543

    • SSDEEP

      3072:8R2AYPY3B3En760r3m/vW2K2Gpvzzv/sdbSDPYSIdkiQWBkG1mZCwQufizQd17:8LyPckiQWBmZCwQufizQd17

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks